Overview

overview

10

Static

static

3

18bfb14882...d7.exe

windows7-x64

10

18bfb14882...d7.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18bfb14882d3c0467fbd456e90de49d7

  • Size

    396KB

  • Sample

    231224-28974sbcdp

  • MD5

    18bfb14882d3c0467fbd456e90de49d7

  • SHA1

    a6c20817bc539335165624328243dc2c4eff0c77

  • SHA256

    58d9e169a8f0f54d7f8567ff7af11933250e5248ba2ef4db4b9661ae27826938

  • SHA512

    6c8ef261e3394fab540c3e0fd319ef0bf765d5bf388cec91779aa5ccbc9ab1ef515de45f556b3146d497381c342a98ac536ad71cafb219c0d7d3bfa925710502

  • SSDEEP

    6144:fYukkYxgq83oA//fFBArsWjntvhBJG4YU9TxcV/WPfXaBo:fYukkYj4oA//fFcXXBJG4Y26EPf

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      18bfb14882d3c0467fbd456e90de49d7

    • Size

      396KB

    • MD5

      18bfb14882d3c0467fbd456e90de49d7

    • SHA1

      a6c20817bc539335165624328243dc2c4eff0c77

    • SHA256

      58d9e169a8f0f54d7f8567ff7af11933250e5248ba2ef4db4b9661ae27826938

    • SHA512

      6c8ef261e3394fab540c3e0fd319ef0bf765d5bf388cec91779aa5ccbc9ab1ef515de45f556b3146d497381c342a98ac536ad71cafb219c0d7d3bfa925710502

    • SSDEEP

      6144:fYukkYxgq83oA//fFBArsWjntvhBJG4YU9TxcV/WPfXaBo:fYukkYj4oA//fFcXXBJG4Y26EPf

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks